{"id":"CVE-2026-111730","published":"2026-10-29T16:17:57.210","lastModified":"2026-10-29T16:26:37.430","description":"P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The received length (up to 255) was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end of the buffer. This can lead to a crash (denial of service) or potentially arbitrary code execution.\n\n\n\nRequires establishment of session that needs ADJACENT network access.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}